# Google Workspace

To add your Google Workspace domain, click on "**Sign in with Google**". You will be redirected to the Google login page to grant consent to the application. Your Workspace account is not required to have any specific permissions, however your organisation may need to allow the TIS Platform application if third party apps are blocked.

<figure><img src="/files/wWs9RSgjyrvG1dLYQhZf" alt="" width="375"><figcaption></figcaption></figure>

Make sure you choose the Google account that is a part of the Workspace domain you wish to connect. Read the requested permissions for the TIS Platform application, and click "**Continue**" if you are happy to proceed. If you do not continue, you **will not** be able to use Google Workspace as a login method for the TIS Platform.

<figure><img src="/files/zK74YFw9rc1ITYmUEnWO" alt="" width="563"><figcaption></figcaption></figure>

Once you grant the TIS Platform permission, you will be redirected back to the administration panel, and a popup will appear, prefilled with your Google Workspace domain.&#x20;

### Configuration Options

#### Display Name - *Required*

The Display Name is for administrative purposes only and will not be visible to users, as all Google Workspace connections will only be shown on the TIS Platform login screen as a single "**Sign in with Google**" button. This setting is for your administrators to differentiate between multiple Google Workspace domains, as multiple connections can be added.

#### Domain - *Prefilled*&#x20;

This domain is prefilled from the previous step and **cannot be changed**. If the domain is incorrect, please restart the setup process and ensure you log in using an account that is part of the domain you wish to setup a connection for.&#x20;

#### Merge Users Where Email Matches an Existing Account

We recommend **leaving this disabled**. For more details, please see [General Options](/single-sign-on-sso/general-options.md#merge-users-where-email-matches-an-existing-account).

### Role and Group Mappings

For more information on how role and group mappings work, please see [Role and Group Mappings](/single-sign-on-sso/role-and-group-mappings.md).

For Google Workspace, your **Workspace Groups** are used for role and group mappings. To map your Security Groups, please retrieve the **Email Address** for the group to use in the "**Group Email Address**" field. This must be the full address, including the domain after the @ symbol. This can be found in your group list or the **details page** for the group.

<figure><img src="/files/0XtCJ4okALLQ48jSO3xe" alt="" width="563"><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tistraining.com/single-sign-on-sso/connection-types/google-workspace.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.